ci: build publish and deploy container image

deploy/compose.yaml

@@ -0,0 +1,27 @@
+services:
+  bot:
+    image: git.kandrusyak.ru/admin/kandrusyak-bot:${IMAGE_TAG:?IMAGE_TAG is required}
+    container_name: kandrusyak-bot
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      ASSISTANT_MODE: yandex
+      ASSISTANT_DB: /data/assistant_data.sqlite3
+    volumes:
+      - bot-data:/data
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    tmpfs:
+      - /tmp:size=64m,mode=1777
+    logging:
+      driver: json-file
+      options:
+        max-size: 10m
+        max-file: "3"
+
+volumes:
+  bot-data:
+    name: kandrusyak-bot-data